General

  • Target

    b841e6b73f2fd490781009439b337836_JaffaCakes118

  • Size

    2.2MB

  • MD5

    b841e6b73f2fd490781009439b337836

  • SHA1

    47efee7d716d27b3d818a810eb0e1fb82391e880

  • SHA256

    ed887fd2b1a5e2579748036871eb803d238e547a980f3923c8a965ec3ee77889

  • SHA512

    413918c32b714d621e7a9d5f266defed20dd8e3d4fe7ddb711898f9af4b7c155e46a9b1f282db305f50edc0ccb61a18b43552d1175f0a84afdbe63f0ea43d077

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZM:0UzeyQMS4DqodCnoe+iitjWwwA

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b841e6b73f2fd490781009439b337836_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections